1) If the internal auditor fails to identify all key process-level risks, what impact might that have on the overall assurance engagement? If the internal auditor determines that certain process-level risks are key when in fact they are not, what impact might that have on the overall assurance engagement?

2)A staff internal auditor found the following possible deviations from prescribed controls and documented them in her working papers

Invoice Prescribed Possible Number Control Deviation Written author Verbal author rizations of rization by 248 sales by sales phone by sales order depart- order depart- ment. ment. Verification No evidence of sales order of verification; 333 quantities and quantities and prices are prices. incorrect. Verification No evidence of sales order of verification, 377 quantities and but quantities and prices are prices. correct. Price verifica- tion indicated Billing depart- on invoice; the ment verifi- 617 prices do not cation of unit agree with the prices. price list in effect at the time of sale